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SECnONJUf^SUBSTTTDTlON 

Figure 1 gives a passage of narrative English consisting of 94n ]i it- r-. The 
division between words is not marked. . 

Recurring sequences of five or more consecutive letters are underlined. 

Figure 2 shows graphically the number of occurrences of eaeh l.-iier of the 
alphabet . Figure 9 gives the number of occurrences again. Figure 4 the percentage 
frequency to the nearest whole number. In figure 5 the letters of the alphabet are 
rearranged in order of frequence. Figure (i gives the percentage of the t • 1 confined 
to the vowels A, E, 1, 0 and 0. 

Figure 7 gives graphically the bigram frequency, i.e. the number of occurrences 
of pairs of letters in sequence. For example, the figure shows that Tie- " bigi.ou ” 
IN occurs seven times in the given passage. 

Figure S gives the same information as figure 7 in a different form for the letters 
A, R and N. For example, it shows t hat A is preceded by 0 live times and followed 
by G once. 

All the information contained in figures 2, 9, 4, 5, 6 and 8 can be derived from the 
bigram frequency table in figure 7. This form of frequency table is widely used jn 
cryptography. 

In figure 9 the passage given in figure I has been enciphered by the method of 
“simple alphabet substitution," i.e. a table giving a single letter equivalent for 
each letter of the alphabet has’ been used. 

Thus the letter T at each occurrence is represented by W, H by K, etc. It will 
lx* seen from tint underlined sequeiftes that the recurrences of the original have been 
preserved. Figure 10 gives the number of occurrences of each letter of the alphaljut 
in figure 9 and it will he seen that the frequency of the letters has also been preserved. 
In fact each letter of the clear text has been represented bv the letter lying three 
places later in the alphabet. Thus H in the cipher version represents F in the clear 
text and has the same frequency. Note that V is represented by B : this is because 
the alphabet is treated as cyclic. It might lie said that the frequency table in 
figure 10 preserves the frequency pattern of the original text. 

In figure 11 the passage in figure 1 has been enciphered again by the method of 
“ simple alphabet substitution,” but here there is a two-figure equivalent l>«r each 
letter instead of a single-letter equivalent. 

Here again the recurrences of the original text have been preserved. Figure 12 
gives the number of occurrences of each pair oi figures and its clear equivalent. 
It will be seen that the frequency of the original is still preserved but the pair 
equivalents for the letters in alphabetical order are not in numerical order. Such a 
shuffled table i.-. frequently referred to as " batted.” In figure 19 the -uh-tiiution 
table is rearranged to show the letters in alphabetical order. The table in figure 19 
may be de-efihed as the ” encipher " and that in figure 12 as the " decipher." 

' In the two examples of cipher so far given tin- " unit of miI>m button ” i> one 
letter and two figures iv.-pectively. The unit of substitution can. of cmir-e. three 
or more figure,', or two or more letters or symbols <4 any kind, provided dial no 
confusion between the various cipher equivalents is caused. 

Exercise I. — Fist all recurrences of t hr more letter- in ligur*- 9 giving the 

“ interval " between the various examples of the same recurrence. A- an example of 
the form which the "interval" should take in your li.-t, take tie - ~equ< nee 
F X U U H y which occurs twice in the lirst line. The iir-i letter oi ih.- -vquen<v F 
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in the two occurrences is respectively the sixth and the twenty-fourth letter of the 
cipher text. The interval will be 24 — 6, i.e. 18. 

Figure 14 gives still another cipher version of the text in figure 1. 

Exercise 2. — Examine figure 14 for recurrences of 3 or more letters. Note that 
here some of the recurrences of the original text have been lost. List the. intervals 
from all the recurrences observed. Figure 15 gives in graphic form the frequency 
table in figure 14. It will be observed that the frequency of the original text is here 
partially blurred. In the original text the letter E occurred 42 times and 5 letters 
did not occur at all. Here the commonest letter G occurs only 33 times and only one 
letter does not occur. 

Exercise 3. — Compare the intervals obtained in Exercise 2 with those listed in 
Exercise 1 . Observe that all recurrences have been preserved where the intervals 
are even and lost where the intervals are odd. _ - 

Figure 16 gives two separate frequency tables, I for letters occupying odd positions 
in figure 14, and II for those occupying even positions. 

Exercise 4. — Now compare the clear text in figure l with the cipher text in 
figure 14 in conjunction with figure 16, and describe shortly the method of 
encipherment employed. 

The unit of substitution in figure 14 is still one letter but the method is no longer 
“ simple alphabetical substitution ” ; it can be described as “ periodic substitution,” 
and the period is two letters. 

Exercise 5. — Solve the following cipher text which has been enciphered by the 
method of “ simple alphabet substitution.” The clear text starts with the word 
" possession.” (N.B. — The fact that the text is divided into 5 figure groups has 
nothing to do with the ” unit of substitution.” Messages sent by cable or W/T are 
most frequently transmitted in 5 letter or 5 figure groups.) 



28827 

32134 

26633 


73213 

31232 

23210 


21167 

44244 

00277 


32132 

38700 

17800 


12112 

02662 

03322 


77266 

11266 

00167 


00021 

16700 

00024 


13210 

02882 

41233 


00343 

77211 

65000 


Exercise 
Exercise 5. 


6.— The following cipher text represents the same 
Find the method of encipherment. ' 


clear text 


as in 


18172 

70181 


12172 

71116 


12111 

22210 


17160 

17802 


11210 

21070 


23212 

14325 


33141 


42701 


61116 



Figure 17 gives a cipher text of 280 figures. The clear text is not that of figure 1 . 

If the cipher text is cut up into pairs on the assumption that the unit of 
substitution is 2 figures, it will be seen that the pairs are limited to the numbers 
from 01 to 44, providing a fair check of the original assumption. Figure 18 gives 
in tabular form the analysis for 2- and 3-pair recurrences. Take for example the 
pair 23. The table shows that it occurs 4 times in the text, that when it occurs 
as the third pair it is followed by 38, 11, and that when it is the fifty-fourth pair 
it is followed by 18, 22, etc. 

Figure 19 gives the 3-pair recurrences derived from figure 18. It will be seen 
that there arc five such recurrences and that 7 is the highest common factor of the 
five intervals. 

In figure 20 the pairs of the cipher text are written out in seven columns. 
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Figure 21 gives the frequency table for each of the columns separately. In any 
particular column the number of pairs is small and the coimi correspondingly 
unsatisfactory, but the patterns of the columns suggest that each column has its 
own ” simple alphabet substitution ” and that the order of the alphabet is 
preserved. 

Figure 22 gives the result of the attempt to equate the cipher units of the 
seven columns to the same base by sliding according to the pattern. The right- 
hand column of the figure 22 gives the total number of occurrences in each line 
and should therefore give the frequency of the .letters of the original text. 

Exercise 7 . — From figure 18 list the 2 pair recurrences and their intervals and 
observe how many of these recurrences have the period of seven pairs and how 
many are accidental. Go carefully again over the workings given in figures 17 to 22 
and solve the text of figure 17. 

Exercise 8 . — Solve the cipher text in figure 23. 

Exercise 9 . — The clear original of the cipher text in figure 24 is the same as 
that given in figure 1 but in the simple table used for enciphering the whole range 
of pairs from 00 to 99 is used to represent not only the letters of the alphabet but 
also common syllables and words. Reconstruct the table as far as you can. Make 
a frequency table from the pairs of figure 24. You will see that the pattern of- 
the frequency table is far less distinctive than that in the case of simple alphabet 
substitution. 

Figure 25 gives a text enciphered by means of periodic substitution on the 
basis of the syllabic table you have derived from figure 24. The unit of substitution 
is the pair of figures. The period has already been found to be 4 pairs and the 
text has consequently been written in 4 columns. Two long recurrences on the 
period are underlined. ■ 

Figure 26 gives 4 bigram counts each giving the occurrences of pairs in the 
respective columns together with the pair appearing on the right in each case. 
For example the second and third pairs of the text are 08 38 ; 38 will be found in 
line 0, column 6 of Table 2. (N.B. — The expression " bigram count,” normally 

used of 2 letters, is here used of 4 figures as the unit of analysis is 2 units of 
substitution.) 

In contradistinction to the simply sliding pattern of figure 21 {q.v.) t where the 
whole range of possible units is taken up in the basic substitution ( i.e 26 letters 
or 100 pairs of figures) it is usual to treat the alphabet from A to Z or the 
numerical digits from 0 to 9 aS cyclic. 

The result of this is that, for example, X slid 4 places down the alphabet becomes 
B, the digit 7 slid 5 places down a series of digits 0-9 becomes 2, the digit 4 slid 
9 places becomes 3, and the pair 74 slid 59 places down a series of pairs 00-99 
becomes 23. This is obvious in the case of letters but may require further explanation 
in the case of figures where it is equivalent to " non-carrying addition.” The 
arithmetical sum of 74 and 59 is 133, whereas it might be said that the 
" cryptographic sum ” of 74 and 59 is 23. 
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Figure 27 gives what is known as the Vigen^rc table, an old type of cipher 
equivalent to the sliding alphabet type. Its use is exemplified below : — 

To encipher the sentence “ GONE WITH THE WIND ” on the key word 
“ NOBLE," write the letters of the key word as many times as required 
under the clear text : — , 

GONE WITH THE WIND 
NOBL ENOB.LEN OBLE 

Look up in the VigenSre table the letter at the interesection of the line having 
G at the left and the column having N at the top. This gives the requisite cipher 
letter. The same result is obtained by looking up the letter at the intersection of 
the line having N at the left and the column having G at the top. . ‘ • ■- 

The cipher version will be : — . 

TCOPAVHIELRKJYH 

The operation may be expressed algebraically : — 

G + N = T 

, 0 *1* o = c 

N + B = O, etc. 

Exercise 10. — Encipher and decipher a sentence of about 20 letters according to 
the Vigen£re system to satisfy yourself that you understand it thoroughly. 

Figure 28 gives the digital equivalent of the Vigen^re table. Inspection of the 
table will show that encipherment on this table is equivalent to " non-carrying 
addition." . - 

Now examine again the cipher passage in figure 25 and its analysis in figure 26 ; 
as the frequency of the syllabic table is much less distinctive than a simple 
alphabet substitution, it may be difficult to equate the 4 columns on evidence of 
- pattern alone. There is, however, a direct method of equating the columns where 
the period is very short. It will be found to be applicable in this case. 

The pairs resulting from the subtraction (without carrying) of each pair from 
the pair 4 later than it at period distance from it) are written down in 4 columns. 
Figure 29 gives this, result. You will notice that the recurrence 67 72 89 occurs 
four times, twice starting in column 4 and once each in columns 2 and 1. The two 
recurring sequences starting in column 4 correspond to a recurrence in the cipher 
text ( see figure 25) ; the sequence in line 55 (of figure 29) and the shorter sequence 
67 72 in line 3 also correspond to recurrences in the cipher text. 

The purpose of this sort of analysis may perhaps be best understood when treated 
algebraically. Imagine a series representing consecutive clear units a, b, c, d, e, f, 
etc., enciphered on a recurring key w, x, y, z. The cipher versions can then be 
expressed as : — a -j- w, b -f x, c + y, d -f- z> e + w, f-j-x, etc. The series 
obtained in figure 29 is equivalent to : — 

' e + w — (a + w), i.e., e — a, 

f -f x - (b -j- x), i.e., f — b, etc. 



Thus it will be seen that any recurrence of rt consecutive clear units will be 
revealed as a recurrence of n — 4 consecutive terms in a table such as figure 29. 
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Compare the recurring sequences in figure 29 with the cipher text in figure 25. 
They will be found to have resulted from the following passages : — 



A. 




91 


93 


01 




39 


58 


65 




B. 




91 


93 


01- 




39 


58 


-65 


80 


C. 








18 




74 


84 


58 


75 




46 


63 






D. 








18 




74 


84 


58 


75 




46 


63 






E. 


67 


08 


79 


.80 




. 24 


70 


58 





These 5 passages can be assumed to represent a 7-unit recurrence in the dear 
text starting in 3 different positions in the period .(presumably the last letter is 
missing in A). Leave column 1 untouched, i.e., assume that the first clear unit of 
the recurrence is 67. The other versions of the recurrence in columns 2 and 4 
start with 91 and 18 respectively. 

To reduce these to 67 it will be necessary to subtract (non-carrying) 34 and 51. 
These provisional “ subtracters " when applied to the whole of their corresponding 
columns give the following result : — 

00 34 .. 51 



A. 




67 . 


. 50 




39 


24 . 


- 


B. 


' 


67 . 


. 50 




39 


24 . 


. 39 


C. 






67 




74 


50 . 


. 24 




46 


39 




D. 






67 




74 


50 . 


. 24 




46 


39 




E. 


67 


74 . 


. 39 




24 


46 . 





Exercise 11.— Find the provisional subtractor for column 3. You are now in a 
position to reduce the whole of figure 25 to one common base. Find the correction 
necessary to reduce the whole to the true figures of the syllabic table reconstructed 
in Exercise 9. 

The above is only one of the methods which might have been employed to solve 
the cipher text in figure 25. In this case it is probably the most direct, but ciphers 
with such a short period are very vulnerable and when the period is longer than the 
normal length of recurrences this method would be useless. 
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Other methods which might have been employed are : — '■ ‘ 

(i) Reduction of the columns to a common base by fitting the frequency patterns. 

(ii) Finding provisional subtractors for each of the columns which would equate 

the common pairs in them to common units of the syllabic table (which, 
in this case, has been partially reconstructed). . ■ 

It cannot be emphasised too often that the proper method of solving a cipher is • 
the shortest, and that it is the business of the cryptographer to proceed as rapidly 
as possible by experiment, devising at each stage new methods of approach based on 
the features, observed. • 




Exercise 12. — Solve the cipher employed in the six cipher texts of figure 30. The 
clear texts are passages of nanative English taken from a book on meteorology. You 
will have to analyse the texts for recurrences and list the intervals between them, 
being careful to distinguish between internal recurrences (ix., those within one of 
the texts) and external recurrences ( t.e those which connect two texts). But, 
before doing so, read through the cipher texts ; a preliminary cursory examination 
is always advisable and it may save you much trouble if you can recognise any non- 
textual groups inserted at prearranged places' as key-indicators or check groups. 
(Such non-textual groups will always be fairly obvious at this stage of the course;) 
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SECTION IL— TRANSPOSITION 
(A) Simple Transposition 

Figure 1 gives a cipher text sent in 8 parts, the first 7 each containing 55 letters, 
and the eighth the remaining 12 letters. Figure 2 gives the frequency count which 
is clearly the count of unaltered English letters. Some method of transposition of 
the letters is therefore employed. It is a justifiable assumption that, as the first 
7 parts are of the same length, the system of transposition is identical for all of 
them. The first 7 parts are therefore written under one another, and the columns 
numbered as in figure 1. t 

Consider the letter Q which is the 42nd letter of the 7th part. This ought to 
be followed in the clear text by U, and there hapj>ens to be only one U in the 7th 
part. Below will be found columns 42 and 41 of Figure 1. 

42 41 

E . R 
0 N 
W T 
T S 
H E 
ED 

Q U 

If Q and U are consecutive letters in the clear text of the 7th part, then the 
pairs of letters shown above should also be next to one another in the other parts. 
On the basis of these two columns, by trial and error, the following collection of 
columns is put together : — 

.18 2 49 13 28 42 41 

- A N U M B E R 

N S A T I O N 

A Y G R 0 W T 

• U R R E N T S 

' L Y T 0 T H E 

• E LOPPED 

. . S O FREOU 

This is the process known as ” anagramming Once a start has been made it 
is not usually difficult to complete the text, given sufficient “ depth ”, " depth ” 
being defined as the number of texts of equal length to which the process is applied. 

For instance it will be seen at once that the next column to be added on the left 

should have M as the 3rd letter, C as the 4th, and V as the 6th. Column 33 will 
be found to fit. ■ 

Figure 3 shows a further stage of the process of anagramming. . An attempt 
might now be made to find if there is any system revealed in the “ anagram key ”, 
i.e. the series. of column numbers in the anagram order. 

Figured show's the effect of arranging the “ anagram key ” on a series of different 
levels so that each level contains .only consecutive numbers. The progression 
revealed can be used to carry the anagram further. For example, the next 
numbers to the left in the anagram key should be 51 4 20 34 21. Upon examina- 
tion it is found that the first four of these are correct, but that column 21 is not 
correct. So a fresh start has to be made. 
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Exercise 1 . — Complete the anagram. 

Figure 5 shows the extension of figure 4 when the anagram key is completed. 

At the right-hand side, the levels have been numbered in numerical order, i.e. . 
level 1 contains the numbers 1, 2, 3, 4, 5 and 6, level 2 contains 7, 8 and 9, level 3 
contains 10, 11, 12, 13, 14, 15, 16 and 17, etc. ' 

Take level 8 — it contains the numbers 37 to 46 ; these arc the 37th to the 46th 
cipher letters and they are the 55th, 54th, 50th, 49th, 41st, 40th, 28th, 27th, 11th 
and 10th letters of the clear text. Figure 6 is built up in this way and show the 
original method of transposition — the " routing ” is shown more clearly in figure 7. 

Exercise 2 . — What is the clear text of part 8 ? 

The series 8639 1 47. 2 10 5is known as the “ transposition key”. The 
diagonal " routing ” is one of the innumerable geometrical transposition systems. 

The original diagnosis of the system of transposition is often extremely difficult, 
and successful ” anagramming ” is the basis of all cryptography in this field. 

The commonest of all systems of transposition is that known as “ simple trans- 
position ”, Here the text to be enciphered is written horizontally under a key 
and the cipher text consists of the columns so obtained written horizontally in the 
numerical order of the numbers, starting at the head of them. The example below 
gives a clear text written under , a key . ‘ 

Transposition key : '5' 2 6 4 1 3 

Clear text : T H E C A P 

T A . I N S' A 

N . I) T H E K - 

I N G S D E 

PART 

The cipher text will be ASEDH ADNAP AKECN HSTTT NIPEl TOR. 

The decipherer reverses the process, but he has to construct the frame required.- 
to fit the key, and the number of cipher letters received. 

Transposition keys are frequently derived from memorizable words or phrases 
or from sentences from a book. The. normal method is to number the letters from 
left to right in alphabetical order. For example, the key phrase : — 

L I T T E E A P P L E S 

gives the key : 5 4 II 12 6 2' F' 8 9 7 3 10 

The feature of “ recurrence " does not normally occur in transposition systems, 

but there are certain circumstances in which recurrences can be found and used. In 
simple transposition two of the most useful of these cases are : — 

(а) where the same message is enciphered twice on two different keys of the same 

; - . length, and . ; . 

(б) where two messages enciphered on the same key contain the same clear 

passage (at least twice as long as the- key) starting at the same Column in 
the "cage”. (This word is sometimes used to express the shape of a text . • 

whien written under the transposition key.) . 

* . . ' * ' ' . • * « 

In figure 8 will be found three clear texts written under their transposition keys. 
Cages 1 and 2 have the same clear text, but the transposition keys are different,' 
though of the same length. Cages 2 and 3 have the same transposition key and the 
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first 31 letters of the two clear texts are identical. (It will be realised that the 
commonest place for case (6) to occur is at the beginning of texts.) 

In figure 9 the cipher versions are given in a form suitable for displaying the 
recurrences. It will be seen that the recurrences are portions of columns in the 
original cages, and that they do not represent consecutive passages of the clear text, 
but are scries of clear letters, the key length apart. 

Figure 10 shows the recurring portions between cipher texts 1 and 2 ; these are 
the columns of cage 1 rearranged in dage 2. 

It will be seen that from figures 9 and 10 the key length 8 can be deduced, cither 
by comparing cipher texts 1 and 2 or 2 and 3. 

From any of the three cipher texts the clear text could be obtained by rearranging, 
as columns, the portions marked off in figure 9. It is very important to notice here 
the part played in reconstruction by the grouping of all long columns to the left of 
the cage and short columns to the right. In the system of simple transposition the 
last lines of cages are hardly ever completed so as to make the cages into " perfect 
rectangles.” The latter only occur by chance and instructions are sometimes issued 
with a view to avoiding them. 

Exercise 3. — In figure 11 will be found two cipher versions of the same clear text, 
one letter of the clear having been omitted in the first encipherment. Take a 
frequency count of the two messages in order to decide- what the missing letter is. 

Examine the two texts for recurrences between them and find the clear text. 

Figure 12 is intended to demonstrate the approach to solution of simple trans- 
position ciphers by making use of stereotyped beginnings of the clear texts. The 
five cipher texts shown are five parts of the same clear text, all except the first 
starting with the word ” continuation.” The texts vary in length from 45 to 
71 letters ; the numbers from 45 to 71 have been written down in a column on the 
left hand side, and each of the cipher texts has been written out opposite to the 
number representing its length, i.e., part 2 which has 52 letters 'is written inline 52, 
etc. The radial lines divide each text into 11 equal pans. It will be seen that near 
each dividing line the same letter occurs in parts 2, 3, 4 and 5. These letters are the 
letters of the word " continuation ” and lie at the heads of columns in the original 
transposition cage. In fact, from the letters occurring at proportional positions in 
parts 2, 3, 4 and 5 of the cipher text, the key-length 1 1 could have been found. 

This proportional method of writing out cipher texts on the same transposition 

key has wide applications inthe solution of transposition systems. 

» 

Exercise 4. — Solve the texts in figure 12. 

Figure 13 shows the classical method of treatment, known as the " hat,” of 
simple transposition texts where the cage is not a perfect rectangle and the key-length 
is known or assumed. The five diagrams give this effect of the five parts of figure 1 2. 

Here the key-length is in each case 11, and as a result of the incidence of long and 
short columns those letters which might belong to either of two adjacent columns 
•are shown twice. The thin lines enclose the columns on the assumption that all the 
long columns are at the right of the cage — the thick lines enclose the columns on the 
assumption that the long columns' are all on the left. . 

Such “ hat ” figures are, of course, quite independent of the text — they are 
dependent only on the number of letters in the text and the key-length. 

Figure 14 is a diagrammatic representation of the column limits for the key- 
length' 10, and text lengths from 40 to 75. This arrangement is similar to that of 
figure 12, while the thin and thick lines have the same meaning as those in figure 13. 

Figure 15 shows the effect of superimposing a similar hat-diagram (but this time for 
the key-length 11) on the texts of figure 12. 
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/. w/.im' 5, M.ikt- .1 ul <'* mil «:iri-'i >n ot tiii ur>-- 12 t > > 15 and make Min* th.it 
you understand tli-' various :i*peri* di*pi:i\vd. You will notice that tin’ radial lin« < 
* -1 tillin’ 12 hav he< ninr 1 m • -> e\pre**ing probability (o! the } ►< »sit ic >ns id t In' cohttnn- 
In ad") in lignit* II and 15. i < • ;i -i> h t 1 f < > w vmi would draw .similar lines of 
prohahili; y m tin- li.it -diayr.itn> of iigup- Id. 

To digtv** for tin* nn.in.-nt tr.nn tin main lino of argument, it ha- horn stated 
above that inm-jio.-ilion keys aiv freijurittlv derived from inomorizahl.- kev-w-.rds or 
phrase* i, r Horn lino-. chosen at random tr.-m a prearranged lmok. 1'ln* conventional 
mot hod of forming a k-y from text has al>- . horn shown. It is sonn-timrs necessarv 
to attempt to imd out t ho textual source o| kov>. The solution is much oasior when* 
t ho key i* a long on.-, i.c. at least 25 terms. It is advisable to lay out the key in 
diagrammatic form as in figure lb. 

It will he .-'••in that the method of writing' the key <mt has been to write down 
the numbers of the key in immerieal order from left to right and to drop to a lower 
line every time it i* necessary to go back to the left. As the occurrences of each 
letter are numbered from left to right, it follow.* that in figure 18 numbers on two 
different lines cannot represent the same letter. There must be at least Id different 
letters represented in the key. A start is made by assuming that the occurrences 
of the letter E are represented by two or more consecutive numbers from the seri.-* 
5, 8, 7, 8. If this is so, then l and 2 can only represent B, C or D, etc. The word 
THE might well be represented twice by 28 12 5 and dU Id 7. Then 9, 10 and 1 1 
must l)o F or G and 29 must be T. 

Exercise 6. — Find the sentence of English poetry represented by the key in 
figure 18. 

Exercise 7. — Attempt to liiul the sentences of English jxietry represented by th<- 
10 keys given in figure 17. 

The solution of simple transposition ciphers in the case where there is a difteiem 
key for each text is chielly a matter of experience and cannot be taught as a pi ores*, 
within this course. But an example will demonsttate the general lines of work 
Figure 18 (A) gives a piece of narrative text enciphered bv means of simple 
transposition. Figure 18 (B) shows d columns fitted together by trial and error 
without assuming any particular key-length. The trigrams enclosed between the 
two horizontal lines look correct. 

Exercise 8. — Complete the solution of the text in figure 18 (A) by — 

(a) finding the key-length, and 

(b) constructing the " hat " diagram. 

Exercise 9. — Figure 19 gives the “ anagram keys ” of five texts each enciphered 
by different processes of transposition. In each case find tho method of encipher- 
ment. You may find it easier to work from the “ encipher key ” instead of from 
the “ anagram key.” The text following Exercise 12 describes how to form the 
one from the other. 

Exercise Ilf — Devise a transposition cipher to lie used under the following 
conditions 

(a) The cipher is t<> lie used between an agent abroad and hi* headquarters at 

home. 

(b) Tin y will lie out of touch with one another for at least a month. 



I 
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(c) Kadi holder ma\' he exacted to send not niotv titan one tm-sst".- a < i.* .if 
not ntoiv than 1 < M * letters. 

(</) The cipher sin mill i >< • a^ far as possible secure. 

(?) I'hi' atmtH imiM he able to mentori-e tin - ciph'-r complet.-ix- ami nui't -tot 

cany any coinpromistni: papir-. 

(iiv«: short but complete directions tor ami d. -ciphering. 



hxercise II. I- 1 1 ii -r« • any method bv which the t 1« ju.ii'i < - i s can convcv to 
the agent, in the cipher vx hit'll v-at devised in tin !a>t ex.-rdse, instructions to diauce 
the ciphei with a view to tv-establishing ■.ectnitv oti the assumption that vottf 
cipher lias been compromised ? 



Write out on paper your solut ions of Kxerdsos lu -ami 11. am! hanil in to the 

instructor. 



it 



IC4H'S7) 



• * ** 
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SECTION n 

(B) Double Transposition 

A f;ir more secure system of transposition than any which has appeared so far 
in this section is that of " double transposition.” Hen: then: are two processes, 
each of simple transposition, either on the same key or on two different keys. In 
enciphering, what would have been the cipher version after simple transposition is 
written horizontally under the second key and taken out column by column according 
to that key. 

Figure 20 gives two examples : — 

(a) in which the same transposition key is used twice, and 
{ b ) in which two different keys are used. 

Exercise 12. — Make up an example for yourself so as to understand thoroughly 
,Hhe process of encipherment and decipherment. 

Generally speaking the only method of solving double transposition is by 
anagramming either completely or partially, two or more texts of the same length. 

Below- will be found the complete anagram key of a text enciphered by double 
transposition. The following is a rapid method of reconstructing the transposition 
key or keys, given the complete anagram key. The method is applicable whether 
one key is used .twice or two different keys are used. 



1 


2 


3 


4 


5 


6 


7 


8 


9 


10 


11 


12 


13 


14 


15 


11 


1 


10 


18 


8 


17 


7 


26 


9 


25 


6 


33 


5 


32 


23 


16 


17 


18 


19 


20 


21 


22 


23 


24 


25 


26 


27 


28 


29 


30 


24 


22 


31 


16 


30 


15 


29 


21 


28 


14 


4 


13 


3 


20 


27 



31 32 33 
19 2 12 

Numbers in the above series, the anagram key, represent the numbered positions 
of the text in the cipher order arranged according to their position in the clear 
text, e.g. the first number in the series, i.e. 11, means the eleventh letter in the cipher 
order and it is the first letter of the clear text. 

Below is another series, the indexed version of the above : — 

2 32 28 26 13 11 7 5 9 3 1 33 

27 25 21 19 6 4 31 29 23 17 15 16 

10 8 30 24 22 20 18 14 12 

The first term, i.e. 2, means the second clear letter which occupies the first position 
in the cipher order. To distinguish this series from the anagram key, it will be 
described here as the “ encipher key.” 

From this series is derived a further series, here termed the “ interval key.” This 
gives the intervals, positive or negative, between consecutive terms of the encipher 
key. 



+30 


-4 


-2 


-13 


-2 


-4 


-2 


+4 


-6 


— 2 


+32 


-6 


-2 


-4 


-2 


-13 




+27 


_2 


-6 


-6 


_2 


+ 1 


— 6 


—2 


+22 


-6 


_2 


-2 


-2 


-4 


-2 
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The three occurrences of the sequence — 2, —4, — 2 aiv deriv- d irmn the following 
sequences in t lit* encipher key: — 

IS 1 1 7 5 

27 25 21 Is) 
and 20 IS 14 12 



These sequences are. better arranged as follow-. : 



IS 


11 


7 


5 


2il 


IS 


14 


12 


27 


25 


21 


19 



Tin: constant difference 7 between each number of the above figure and the one 
below it will be noted. That this must be the key-length of the first transposition 
key will be understood if the first cage is made up on this assumption. 



1 


2 


s 


4 


5 


6 


7 


8 


9 


10 


11 


12 


13 


14 


15 


10 


17 


18 


19 


20 


21 


22 

29 


2S 

SO 


24 

si 


25 

S2 


20 

SS 


27 

J 


28 



The four columns of the earlier figure : — 

IS 11 7 5 

20 IS 14 12 

27 25 21 19 



are now seen as portions of columns in the first cage. 

In fact the 12 numbers concerned lie in the following positions : — 

5 7 

11 12 IS 14 

IS 19 20 21 
25 27 



in. the first cage, and in the positions : — 

IS 20 27 
11 IS 25 
7 14 21 

5 12 19 



in the second cage, of which tin.' transposition key-length is still unknown. 

The block of the second cage just reconstructed ran now be extended a.-> follows : — 

0 • IS 20 27 

4 j 11 IS 25 S2 

, 7 14 2) , 2S 

i 5 12 19 | 20 SS 
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V 



n 




Tin- next extension of the second cage is obtained by completing the partial 
rohitmis of the above figure from the encipher order : — 

11 

61 

29 



IS 


20 


27 


|2 


11 


IS 25 


d2 


7 


14 


21 


28 


5 


12 


19 


26 



Now the earlier process can lie repeated bv extending the lines t<> include the 
complete columns of the first cage : — 









6 


id 


20 


27 


o 


9 16 


2d 


do 










4 


n 


IS 


25 


d2 


d in 


17 


24 


dl 


d lo 


17 


24 


dl 


7 


14 


21 


28' 


1 • 8 


15 




20 


1 8 


15 


22 ' 


29 


5 


12 


19 


26 


dd ! 









Exercise Id. — Complete the solution, i.e., find the two transposition keys. 

There is an alternative method of solution working only from the anagram key. 
but it is dependent on knowledge of the key-length of the first transposition key. 
In the problem solved above it is necessary to go back to the point at which it was 
established that the first key-length was 7. 

The anagram key is written out in the appropriate cage as follows : — 



11 


1 


10 


18 


8 


17 


7 


26 


9 


25 


6 


dd 


5 


d2 


2d 


24 


22 


dl 


16 


do 


15 


29 


21 


28 


14 


4 


id 


d 


20 


27 


19 


o 


12 







The key-length of the second transposition key is unknown but working from the 
anagram key the second cage will have an appearance similar to the following : — 



6 


17 


28 


2d 


1 


12 


7 


18 


29 


24 


2 


Id 


8 


18 


do 


25 


d 


14 


9 


20 


dl 


26 


4 


15 


10 


21 


32 


27 


5 


16 


11 


22 


ad 









i.e., the columns will consist of consecutive numbers reading downwards. The lines 
will be composed of the columns of the first transposition cage. The columns of the 
first cage can be fitted together in lines to form part of the. second cage as follows : — 



1 


9 


24 


21 


27 






10 


25 


22 


28 


19 




11 


26 


2d 


29 


20 


and 17 


5 


do 


Id 






18 


6 


dl 


14 


2 






7 


32 


15 


d 






8 


dd 


16 


4 


12 



Exercise 14. — Find the two transposition keys. 

Exercise 15. — Kind the two transposition keys from the following anagram 
key : — 

d 1 2 27 25 26 28 21 19 20 6 4 5 

7 14 12 Id 10 S 9 11 24 22 2d 17 15 

16 18 d! 29 d0 
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In figure -I an anagram key i.- given and ilie diagram below ii -hows it as il 
appears in its two cages. (Vrtain recurring feature-, known a- " riivtliiu-.” arc 
underlined. It will be seen that the term- tliinlv underlined c>iit<-mi t-> a ivenrring 
pattern : — 



6 


• 5 


, , 




7 




27 


2(4 






2S 




15 

2 


14 

1 


• 




16 




The interval at which the pattern recur- i- ' 


ix. 


. the 


lir-t key-length. The first 


key-length is also revealed by the term- tlii 


rklv 


unde 


rlined. It will fm ther be 


observed that the terms entering 


into these " 


rlivt Inn- * 


are denv'-il from eoluimi- 


of the Second cage. Thu.- 6. 5 and / bel 


■ lilg to one 1 


Column of the 2nd cage, but 3 i- 


not in the same column. 












1 his feature of “ rhythm ” can 


a! way 


s be n.-ed t ■ 


> find the first kev-leiigth, and is 


particularly valuable in cn-e- whe 


■re the 


anagram k 


ey i- 


ineumplete. 


The following are tie- tir-t 63 


terms 


of tie 


■ ana. 


gram 


key for a text 140 letters 


long : — 


* 








26 29 W 


32 


130 


127 


42 


97 S6 


11 14 94 


33 


6 


3 


65 


S9 62 


59 67 70 


17 


73 


So 


77 


S3 56 


37 -IIS 121 


53 


124 


13S 


135 


49 40 


16 43 18 


21 


91 


24 


105 


102 34 


7 12S 27 


at* 


4 


74 


1 13 


no fx i 


131 S7 S4 


92 


95 


50 


98 


15 12 



This partial anagram key is full of rhythms but those shown are sufficient, to 
prove conclusively that the first key-length i.- Iff The partial anagram kev is now 
written out again in a cage for a key-length Id and text length 140 rta follows : — 



26 29 66 32 1140 127 42 07 S6 II 14 94 66 6 a 65 S9 62 5y 

67 70 17 73 SO 77 Sd 56 37 1 IS 121 56 124 I3S 135 49 40 46 43 

18 21 91 24 1115 102 34 7 12S 27 30 4 74 113 110 90 131 S7 S4 

92 95 50 98 15 12 



The incomplete columns of the above figure are fitted together in lines to form the 
second cage : — 




Exercise Hr — Go carefully over the working of the above example and complete 
tin- solution by finding the two transposition keys. 

I:,\t’rcise 17.— In certain special, and rather uncommon circumstances, there are 
two or mote possible solutions of a particular anagram key. fry to make up tin 
example to illustrate this. 

The above method of solution of a partial anagram key is only applicable where 
the number of consecutive terms exceeds the first key length by a number sufficient 
to supply recognisable rhythms. Solution can be achieved however in cases where 
much shorter partial anagram keys have been obtained for several different text 
lengths. In practice it may be taken for granted that short partial anagram keys 
will only be obtained either at the beginnings or at the ends of texts owing to the 
occurrence of stereotyped formulae due to addresses, opening references or signatures. 

In the example in figures 22 and 23 it is assumed that five texts of lengths 65. 
66, 69, 72 and 75 letters enciphered in the same pair of keys have Iteen anagrammed 
for the first 12 letters. 

Figure 22 gives the positions of the first 12 letters for each text in the second 
cages, or, from another aspect, the positions in the second cages of the heads of the 
twelve columns of the first cage. A careful study should be made of the manner 
in which the column heads move across the cage with increasing text-length, those 
in the upper part of the cage slowly and the others more rapidly according to their 
level in the cage. 

Figure 23A shows the positions of the column heads of the first cage in the en- 
ciphered texts — the column heads of the second cage are also marked with vertical 
lines. Figure 23B gives the appropriate “ hat-figure." 

Figure 24 shows the method of using the above features, i.e. " maintenance of 
level ” and progressions to the right across the second cage with increase of text- 
length. Figure 24 shows the positions in the final enciphered form of the first 
10 letters of the text for lengths 42, 45, 46, 48 and 50 on a pair of keys. The 
following deductions can be made : — 

(i) 3 remains in the same (proportional) position from 45 to 50 and is 

immediately preceded by 6 in 46 ; therefore 3 is at the head of a column 
in the second cage for aU the lengths, and 6 is at the bottom of a column 
for lengths 42-46. 

(ii) 3 has moved between 42 and 45 while 8 remains in the same relative position 

throughout ; therefore 8 is at the head of a column in the second cage 
and to the left of 3. 

(iii) 7 remains in the same relative position in 48 and 50, and is immediately 

preceded by 2 in 50 ; therefore 7 is at the head of a column in the second 
cage for all lengths, and 2 is at the bottom of a column f<>r all lengths. 
(The position of 2 at the bottom is checked in 46 where it is the last term 
of the series.) 

(iv) 3 remains in the same relative position from 45 to 50. while 7 moves between 

46 and 48 ; therefore 8, 3 and 7 appear in the top line of the second cage 
in that order. 8 probably occupies the top left-hand corner of tin; cage, 
which means that it lies immediately under the mtmlier 1 of the 
transposition key in the first cage, i.e. 1 is the 8th term <>f the first 
transposition key. 

In figure 25 the above deductions are incorporated. The divisions between 
columns of the second cage are. marked where established. It will lx' realised that 
the approximate positions of many more of the heads of columns can be deduced. 
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Figure 26 shows that the second key length must Is- 13. Theaetuai trrm-po-iti"n 
key can he deduced from the changes of column of tin- various mmib.-r- with change 
of text length. In the first place those numbers which an- in difl.-iviu columns 
in 45 and 46 can only have moved one place to the right in the second eage. 
Therefore 4 pairs of adjacent terms in the second tr.mspo-.it ion key nr*- known : 



8 

10 

12 



5, derived from change of position of number 9 of the . neither key. 

7 , „ ,, ,, ,, 4 

16 ‘-2 

6 6 



Now 2 changes from column 8 to column 10 between 42 and 45. therefore S must 
be to the left of 10 in the second cage and there cannot be more than 2 terms in 
between them. Hut 9 changes from column 5 to column 10 between 46 and 4S 
and 5 must therefore lie to the left of 10 with not more than one t.-rin in between 
It has been proved above that 2 is immediately to the left of 5 : therefore part of 
the second key has been reconstructed : — 

8 2 5 10 Id 



Exercise 18. — Find the two transposition keys. 

One further aspect of double transposition deserves consideration. Figure 28 
gives the encipher keys for the five, consecutive lengths from 56 to 60 derived as 
shown in figure 27. 

Figure 29 gives the corresponding anagram keys. Comparison of any two 
consecutive encipher keys in figure 28 reveals that the terms divide themselves into, 
three classes : — 

(a) The same term occurs in the same position. 

(b) The same term occurs one place further to the right in the longer encipher 

key. 

(c) There is no obvious relation. 

In figure 28 in each encipher key after the first, terms which lx-long to class (c), 
when comparison is made with the encipher key above it. arc dropped one line. It 
will be seen that the shift to the right in class (b) hapfs-ns in the case of terms 
occurring in columns of the second cage, numbered higher than the last long column 
in the second cage (i.e. the column which changes from short to long when the text- 
length is increased by 1). As an example, for the length 57, the last long column 
in the second cage is 6, and all terms belonging to columns 7, 8. 9, etc. are of tier 
class ( b ) or class (c) varieties. Class (c) terms are all those lying in the .-ecu id 
cage after the number identical with the text-length. For example, for the length 57. 
the class (c) terms are 1 1, 24, d7. 50, d, 16, 29, 42, 55, which lie after 57 in the second 
cage. (The number 57 which does not, of course, occur in the encipher key h«r 
text-length 56 need not be classified.) 

Turning to the anagram key form in figute 29, the same three classes may 1*: 
observed, but here class (6) terms are in the same position but numerically increased 
by 1. In figure 29 class (b) terms are underlined id red, while class (c) terms are 
dropped a line. For text-length 57 class (a) terms are all numbered 28 or l.-ss, 
while class (6) terms are numbered 80 or more. This is because the la.-t number 
in the second cage, i.e. 55. is the 29th letter to he taken out of the cage-. 

Exercise 19. — Study the class (c) term- in figure 29 and find a rule to aceouui for 
their displacement between consecutive anagram keys. In what circumstance-, 
could the aspect described above be used to a t solution ? 

Figure 30 shows the anagram keys for lengths 5*4 and 57 put through the cage.-. 
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SUPPLEMENTARY EXERCISES A- M 

A. Below will be fi mud three cipher messages each sent in three <>r more parts. 
It is known that. the correspondents tire known to one another bv the names of 
Common ml. .tirs, and it is thought probable that the 2nd, 3rd. etc. p;irts of messages 
begin with the word "continuation.” The texts of the messages are narrative' 
English and apatt from addresses or signatures, no attempt has lx-en made to render 
the text realistic. 

Decipher one of the messages : — 



A/1 


E R E A I. 
R R F H M 
I (i T OS 


R E N H R 
ONA1H 
H I) X L B 


F P 1 P K 
SHOO A 
C E E T 0 


E f 0 W T 
0 I ) M A 0 


A S A I X 
B C Z E 0 


A/2 


E X C N Y 
U N R H A 
T MET 1) 


N B N Y N 
A M O S W 
N MLUA 


HTO E O 
0 I C V I 
A G S I A 


A T E A 1.) 
H H I ) T R 
NT 


A A A E X 
T A E K H 


A/3 


P E T E S 
N I CEO 
TKEAC 


E C F. R U 
L R P S 0 
OCRS A 


D H I S I 
H TOAN 
R 0 S EL 


X U S L D 
T P M U R 


AES W U 
S F 0 S H 


B/l 


B 0 C P R 
N R D L 1 
E M R T F 


MRSEH 
BMOTF 
E T F 1 I 


EEONE 
R R F A H 
R S 0 V G 


I NO EG 
0 I) U F I 
A 0 

i 


TMR D E 
N A A E 0 


B/2 


NKTOT 
U NDFR 
0 A N M R 


A H I L M 
NNODM 
ULAME 


L T 0 0 C, 
0 I C 0 I 
TACI A 


OEACN 
B W N R D 
N rj 


B 0 B I N 
0 U U B M 


B/3 


P L T I S 
NICEO 
OEITK 


THNH T 
L R P I 0 
A E E 0 0 


P LI 1.R 
0 T 0 A N 
S S I A O 


N I I) 0 
T P M U R 


N S N T U 
I. F 0 S S 


C/1 


E HDTT 
P R M A S 
EAAFS 


U T 0 0 E 
W T E T S 
F N 0 A M 


P E 0 M C 
T U F 0 H 
S B 1 SI. 


L q L B I 
R E E L E 
R Ij A 


1 F L I 0 
X H H L A 


C/2 


OS HAS 
N I C E E 
VCRKO 


U F C, 0 E 
I ESSO 
T O S’ P N 


T C I A X 
M T 0 T Y 
T 0 A T U 


T 0 U H H 
M 6 A C M 
X 


OS 0 i. u 
\" R E E 0 


C/3 


1- I T L A 
0 T I W R 
KPTAH 


N NAI. V 
1 E L P 0 
R 0 T 0 W 


T 0 X M 0 
U Y E E N 
N 


O'PNS 
I C 0 A X 


A 0 N U 0 
I.) H I D T * 


C/4 


P A S R H 
H T I E E 
T E T 1. 0 


N N K 1 I 
N \" H P I 
1 S T C. E 


S H Y M A 
W I U P X 
1) 


I IIY II T 
I 0 A A 


A E P i; 0 
0 H 0 1 1) 


C/5 


T l : E N" E 
N i C \V E 
S R A P A 


! •: D T I s 

(.) S X 1 0 

E A T V H 


ONI A X 
l T 0 X 0 
H I EU ,\ 


T non 
B 0 R R M 


G M P T U 
P J I P H 




21 




^EF ID : A3079835 



B. Encipher Key : — 

2 3 H 34 5 12 22 IS 23 SO 2U 9 14 21 31 Hi 2(4 2S 33 29 27 32 I 7 S 1(1 IS 1 1 
25 35 4 13 17 19 24. (Double transposition hut n<>i normal.) 

C. Encipher Key : — 

79 93 105 115 127 19 30 44 5S 09 S3 95 9 117 17 24 35 49 (43 74 SO 94 5 1 1(4 
13 20 31 45 59 7<» S<4 9S 10S 120 130 2(4 3S 52 (4(4 7(4 90 102 M2 124 134 
27 41 55 144 I 3 7 11 15 22 33 47 (4) 72 75 S9 101 111 123 133 139 40 141 
143 SS 1(10 1 10 122 132 13S 140 54 142 S2 4 S 12 1(4 23 34 4S (42 73 S5 97 K)7 
119 129 13(4 3 7 51 (45 SI 2 (4 lo 14 21 32 1(4 (4( (' 7 1 7S 92 »o4 114 12(4 135 
29 43 57 145 S7 99 109 121 131 137 39 53 (47 84 9(4 10(4 IIS 12S 25 3(4 50 
(44 77 91 103 113 125 IS 2S 42 5(4 (48. 



D. Sown messages in an unknown cipher : — 



1. 


T D 14 V i: 


H N G R I 


14 0 G A 11 


k Op B T 


X 14 T I. A 




' KOUl'T 


HIIT A 


S T C 1* Y 


K E M )• A 


1 K 14 li X 




T 14 Y K A 
R 11 S S P 


K T M T K 

S N 14 E 14 


DTK A 0 
14 X 0 0 


n A J G H 


K T O S 1' 


9 


i: di x !•: 


T N o n K 


G 14 X Y G 


B T 14 E A 


E N K A Y 




S 1 14 M U 


0 T 1 K Y 


M X DM! 


T 14 R A 14 


1 k \V K A 




X MX N () 


J SOD H 


1- k K R 1 


1- k EPS 


14 1 ) O 


3. 


N 1)1 V K 
a i u i; r 


N T C, S B 
0 t. K 1 K 


D E I S C 
E E C 1’ S 


l 0 I C H 
E 0 14 


k 14 U 1! 


4. 


1 D T I. 14 


14 N X X T 


N G S P T 


0 B I R D 


14 E A D 0 




Rill' 14 


X A C 14 K 


W T M E T 


E H H E 1) 


DG A X 0 




14 N K S M 
A 14 0 


1.) P S 14 J 


k k II S 


V G C Y Y 


1 0 14 14 U 


5. 


A 1 ) P H V 


14 N X 1. C 


(.; k 1. D o 


B < ; D 14 o 


L I M 1. K 




0 I P P S 


14 C K T 14 


Y M X k X 


1 11 1 p s 


A A A Y P 




K 14 1 Y 1 


A T J R 0 


14 B E I U 


A T 14 K 14 


I. k S k U 


(4. 


T D 14 A 14 


14 X R 1 14 


0 G S B M 


A 0 B T Y 


V 1 ) 1. A K 




U P 14 C 1 


M A G R T 


C P k T O 


M k T I R 


M If K 1 ) A 




0 A K T I 
N P S N 14 


14 KIDS 
A Y Y H 0 


A 0 X k | 
A 


B k Y o o 


S 1- T A C 


7. 


T 1) V 1 \Y 


0 N T K I 


E 0 G E H 


$ B 0 B T 


14 R RED 




A T U P 1- 


Y 1 T T A 


k T (‘ l> M 


T 0 M Y (4 


1 R 14 11 14 




W K 1 K> A 
C 14 N A 1* 


K T 14 A K 
S X 14 X K 


E Y R A ( ) 
S Y 0 l 


I A | 1) 14 


N A O S 1' 



14. Double transposition. Six partial anagram keys on (he same pair of 
transposition keys : — 

Text-length 79. 45 (48 35 (49 3-1 3 1 4 1 72 7 5 3 2 7 4 3 3(4 4(4 21 (45 39 (4o 78 -lo. 
72. (45 5(4 57 1 (41 17 3(4 19 52 59 54 (43 22 5 

,, 75. 15 43 59 28 21 50 38 52 44 (49 9 72 2(4 ,30 

,, ,, 7(4. 58 7(4 (40 2S 54 2 39 4 4*' 19 42 5(4 (41 1(4 03 24 10 (4,s 4S 27 33 

(4(4 5 29 71 

,, ,, 77. 59 28 (41 29 55 2 40 .} 41 19 43 57 (42 hO (4-1 25 lo 09 49 ] 1 

34 (47 5 30 72 

82. 1 1 59 37 71 (44 72 43 (43 7S 33 (4S 79. 
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i\ Tlio fulliiu-iiiji arc complete encipher keys : — 

Tin- cmiibiiuit i<'ii nf t In*, form 41 1 standing at the l«-ft < >f each series is assumed 
t<i haw In -eu taken from the preamble nf the message auagrammed. 

41 1 7 19 30 4 26 37 12 2d 34 8 2b 41 5 lb 27 US 1 Id 24 35 d 15 d6 9 31 6 

17 2S 39 10 21 32 IS 29 40 1 1 22 33 2 14 25 

70 1 7 19 30 52 S3 4 26 37 4S 12 23 34 45 50 67 8 20 41 (VI 5 16 27 38 49 60 

1 13 24 35 46 57 as 3 15 :<6 59 7o 9 31 42 53 6 17 2S 39 50 61 10 21 

32 43 54 65 IS 29 40 51 62 1 1 22 33 44 55 66 2 14 25 47 58 69 

73 3 8 29 40 51 62 73 4 27 37 59 70 12 23 34 44 55 66 19 30 52 63 5 16 38 48 

71 I 13 24 35 45 56 67 3 15 26 47 58 69 9 20 31 41 64 6 17 28 49 60 
10 21 32 42 53 7 18 39 50 61 72 1 1 22 33 43 54 65 2 14 25 36 46 57 68 

41/6 8 17 25 33 4 22 30 39 9 18 26 34 5 14 31 40 1 11 20 28 36 3 13 29 38 

10 19 27 35 6 15 23 41 7 16 24 32 2 12 21 37 



G. Transposition keys to be resolved into the lines of poetry from which they are 
derived : — 

(i) 28 23 19 5 16 8 25 29 1 26 9 4 17 32 18 35 10 21 30 24 13 6 112 33 15 31 14 

27 12 34 20 3 22 7 

(ii) 31 23 30 4 1 20 27 7 8 28 Id 9 19 5 17 10 2 25 18 32 24 21 11 16 29 14 12 26 

15 3 22 6 

(iii) 5 28 25 14 1 1 26 7 15 16 18 21 6 1 8 9 29 2 24 10 22 3 20 12 17 19 23 27 13 4 

(iv) 1 28 7 35 17 9 6 22 2 29 16 30 15 36 18 10 4 23 .'19 1 1 5 12 24 2s 33 20 34 8 

13 3 37 19 38 31 27 41 26 21 40 14 32 

1 24 5 35 16 8 30 27 2 31 28 14 36 17 9 6 3 25 7 10 22 19 29 26 15 20 37 1 1 
33 23 12 4' 34 18 21 38 13 32 

1 24 7 2 12 20 3 4 15 8 31 16 25 21 28 37 9 22 10 26 33 17 32 23 36 5 14 34 
29 30 1 1 38 6 18 35 19 27 13 

1 21 4 15 20 22 6 33 39 29 38 ,‘14 40 13 7 23 35 116 2 24 5 16 25 10 30 26 31 
27 8 32 9 3 19 17 1 1 14 37 18 28 12 

(v) 22 8 11 12 9 1 14 7 2 4 3 18 21 20 19 13 5 15 17 16 10 6 23 



H. An encipher key : — 

8 42 43 60 61 76 26 29 40 45 1 1 SI 74 79 21 16 47 55 a5 6 14 33 36 3 53 18 70 
83 27 9 44 59 62 25 77 ,‘10 39 23 57 12 73 80 31 38 17 54 5 72 81 34 2 49 52 67 
19 84 28 41 10 58 24 75 78 15 22 46 56 64 13 7 32 37 48 4 66 71 82 1 35 50 51 
68 69 20 



I. Two encipher keys on the same transposition keys : — 

25 6 12 24 7 11 20 37 1 28 2 27 26 10 21 :<6 18 9 3 33 29 32 30 17 19 8 4 23 34 
14 15 13 16 3! 5 22 35 

25 6 12 24 29 1 1 20 37 38 15 2 27 26 10 8 35 18 9 3 33 28 32 30 17 19 7 36 4 23 

34 1 14 13 16 31 5 21 22 

J. An encipher key : — 

2 6 14 27 5 9 17 25 4 7 15 24 1 1 13 22 26 3 12 19 23 8 16 20 28 1 10 18 21 
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K. Partial anagram key.' on thr same two tran.-position kevk fur t- xt lend Ik 78. 
79, 127, 122, i:<4. 

76 42 1 1 IS 41 25 22 72 74 22 49 I 2 24 20 5S 52 20 10,54 47 12 22 50 15 09 

79 02 1 1 2S 22 45 74 75 50 22 41 1 21 24 07 17 7 55 52 9 29 21 09 15 05 59 

127 19 121 75 127 SO 07 01 102 92 20 09 27 29 22 1 17 I 14 4 9S 14 1 1 5S 22 

55 45 S7 

122 50 SI 125 1 IS 5 1 17 04 20 25 77 102 92 40 1 12 45 97 25 122 09 1 20 21 

101 72 122 12 

124 121 05 102 02 20 02 04 51 25 108 102 12 40 5S 92 20 11 1 07 0 S2 52 20 

104 Sir 12(1 

1.. See Cipher Text L, in Y7>1. II. The twenty passage.- < -f cipher in thi- exercise 
represent the same passage of clear, ciphered in twenty ditleivnt wins. Pas-age 
No. 19 contains an additional portion of text, designed to make its Mention ea>ier. 

The passage is from an English opera. 

It will probably be found advisable to begin the attack on Passage No. 2, or 
No. 4, these being as it were basic versions. 

After solving the cipher text in every case, compare very carefully the different . 
cipher versions in the light of the (dear, and make a li.-t of the various weak points 
and openings for attack on each cipher. 

M. See Cipher Text M.inVul. II. Eight passages of narrative English enciphered 
by means of n simple memorizable process. 
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SECTION m 
Playfair 

Description 

lli' - following is tin method of enciphering and deciphering l>v means of the 
■simple'! form of Playfair cipher, the classical English method. 

I he basis is a memorizable keyword. The keyword is written down horizontallv. 
any letter occurring more than once being cut out after its first occurrence. The 
remainder of the alphabet is written out after it in alphabetical order. The letter | 
is omitted to reduce the whole to 2a letters and the key alphabet is written into a 
square. 

Example : — Keyword — NECESSITY. Kev square : — N E C S 1 

T Y A B I) 

EG 11 K I. 

M 0 I* Q K 
U V W X / 

1 he message to be transmitted is written out in pairs of letters (wherever the 
letter j occurs l is substituted for it). Where a pair would consist of one letter 
doubled, the letter X is inserted after the first occurrence of the letter. 

Example Text I 7 K E E L) l 7 K 0 M H I S I 7 E T T E K S 

Pair form FK EX ED FK OM HI SF ET TE RS 

In the process of encipherment a pair of letters from the key square is substituted 
for the pairs so formed according to the following rules : — 

1. Where the two letters of the pair occur in the same line of the key square the 

two letters on the. immediate right of them respectively arc substituted 
for them. The lines are treated as cyclic. 

2. Where the two letters of the pair occur in the same column of the key square 

the two letters immediately below them respectively are substituted for 
them. Again the columns are treated as cyclic. 

3. Where the two letters of the pair are not in the same line or column they ate 

regarded as the corners of a rectangle and the two letters at the other 
comers substituted for them, each by the letter on the same line. 

Example : — Key square : — N E C S I 

T Y A B D 
I 7 G HKL 
M O P Q K 
U V W X Z 

Clear pairs UN DE RT HE SP KE AD IN GC HE ST XU TX TR EX EX 
Cipher pairs NT Y1 MD GC CQ 01 BT NE HE GC XB TN Bli DM SV SV 

The process of decipheiment is merely the reversal of the above. The solution 
of Playfair in the above simple form presents little difficulty provided the 
cryptographer is in a position in guess at the beginning of a cipher text. 
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In t lit; following example the clear text is known in hi gin . " 1 In* voire-, blend 

and fuse " 

Cipher text 

I’N AX IG DA yi) SD LF KH IV, PT KA III- Nil M. HI. UE SD HF DX RE 
AG HN HO UE SD HF KS IV IK IT I A K< ' GK <‘K -K NT, TO CM DX 
RE AG HN HO KH I X ZM NY XX Mil K\Y KM UE SD 1'Y NX I’N DX 
L'Z <)E OX KC SK Mil. XA EY ffiOG HO UL GB VF SD UL GB VF SD I I. 
('. C KL Kl KP GU I.T I’N KP IV XA UK XA LX I N W IR OG HO YK 
K I ID IK KY Z.M OK CO SK XA F.K DX DA LF PD Kl EM LK XA FX 
KH SX HO ZM LI) PK 1)1 FI DK KL VC Tl' TI KD AK si. PD Kl EM 
PL DL GK OF LA KF PT HB Kl EM I’D KP SK IA OF CV Kl KL OK 
KH LI) ZK DT PK KT 

Here the clear equivalents of 10 cipher pairs are known - 
Cipher Clear Cipher Clear 



PX 


th 


SD 


le 


AX 


ev 


LF 1 


ml 


UC. 


oi 


kh ; 


an 


DA 1 


ce 


l'G 


df 


QD 


sb 


PT 


us 



Some of the above, can bo provisional!}- clas.-ilied at once. 

(i) {KG = elf) D, K and G in the ke\>quare must be consecutive in one line or 

one column. Alphabetical considerations r-ugge.-u very strongly that 
D I' G is part of the lines and follows closely after the key word which 
presumably contains the letter E. 

(ii) (AX = ev) suggests the rectangle A E 

V X 

A and K being part of the keyword and V and X in the bottom line. 

If so, as there is oulv one possible letter, \V, between V and X, A and K 
must be adjacent or separated by one letter. 

(iii) (UC, = oi) gives as one jxjssibilitv with (i) above : — 1 

D F G 
O 
V 

(iv) (PT = us), in conjunction with (iii) above, give-- : -- 

1 

DFG 

U 

P STD 

(v) (SD = le) with (iv) and (ii) above gives : — 

A . E .1 
. . 1.) F (.i 

. . L . U 

p . s t u 

V \V X . . 
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Exercise 1. — Complete the key-square and find the key-word and the clear text. 

Exercise 2. — Construct in graphic form a bigram table fropi the example given 
above showing the clear equivalents of all the cipher pairs of the example and their 
frequency. ^ 

1 

Exercise 3. — Examine the problem theoretically (i.e. from the aspect of positional 
relationship, independently of what the key-word may be). Some of the questions 
to be answered are : — 

(i) What is the number of cipher letters which can represent any one clear 
letter ? 

. . (ii) Are all the possible cipher letters of one clear letter equally probable ? 

(iii) For any one first letter of a clear pair, how many possible second letters of 
a cipher pair are possible ? 

Exercise 4. — One known method of increasing the security of the Playfair cipher 
is the substitution of pairs from the key-square for pairs <j^:lptt<^)uit'adjaccnt, but 
at a pre-arranged interval. For example, the 1st letter rriiglit bie taken with the 
11th, the 2nd with the 12th, etc., and the 21st with the 31st, etc. The resultant 
pairs may appear as pairs in the cipher version, or they may be split so as to occupy 
the positions of the clear letters in the clear text. How would you overcome the 
new cryptographic difficulties introduced by this complication ? (N.B. — You must 

not assume that the interval is known, but a guess at the textual beginning of a 
message may be assumed.) 



l 
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SECTION IV — COMPLEX SUBSTITUTION 
A. General Considerations 

1. Students have already been introduced in Section I of the course to various 
aspects of simple substitution and of one of the simplest forms of complex substi- 
tution, i.e. encipherment in letters by use of the Vigcnere table, or recipherment 
in figures by use of the figure equivalent of the Vigendre table, in each case by means 
of a short key. Vigcnere substitution is frequently known as “ sliding alphalxit ” 
substitution. The loose term “subtractor” for an addition series (non-carrving) 
of any length will already have been understood. 

2. In dealing with the later exercises of Section I, students will have become 
accustomed to present their material in the form of a table in which those uniis 
of substitution of a, cipher text are arranged in a column to which the same process 
of substitution or resubstitution has been applied. Such a table displays the following 
general features 

(a) Recurrences in the cipher text lie under one another ; and 

(b) the frequency of the original textual units is a feature of individual columns 

and not common to all columns. 

d. Solution dejxmds on the adjustment of the columns to a common base and 
the correctness of work carried out on these lines is, normally checked by the 
appearances of offset ( i.e . overlapping) recurrences additional to those lying under 
one another in the original table. Units of a column of the original table may be 
Said to be " homogeneous.” It is very important that all the implications of this 
method of presentation ” in depth ” should be grasped. The word “ depth ” here 
has a somewhat different significance from that of the same word applied to the 
solution of transposition systems by anagramming. Here it may be defined as the 
number of lines at any point in a table of the kind underdiscussion. % 

Exercise 1. — Refer back to exercise 12 of Section I. Arrange the beginnings 
(excluding non-textual groups) of the six texts “ in depth.” Observe that, when 
the true significance of the starting point indicators has been revealed, units of 
substitution appear on two " cuts ” owing to the fact that pairs belonging to two 
texts of odd and even starting point respectively do not coincide in columns arranged 
in depth. (Conversely,- it should be noted that this feature of “ non-coincidence of 
cut ” of the units of substitution may in certain circumstances be used to arrive 
at the true figures of a complex substitution.) This aspect is worthy of careful 
study. 



11 Long Subtractors 

1. " Long subtractor ” ciphers may be defined as systems in which the subtractor 
is longer than the individual texts to which it is applied. ■ In modern practice such 
ciphers take the following form : — 

(i) First process. Direct substitution for the letters, syllables, words and 
phrases of the clear text of cipher units taken from a code book in 4 or 
S-figure groups. Such a code book may be— 

(а) alphabetic, i.e. the cipher groups in numerical order correspond to 
the clear units in alphabetical order ; or 

(б) " hatted," i.e. the cipher groups are shuffled, and two books have 
to be prepared, one for enciphering and the other for deciphering, 
the latter being the index in alphabetical order of the former. 
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(ii) Secmid pn«.v>>. .Volt-carrying addition t<> 1 1 1 . ■ figim-s ' >1 »i a i i i»*<l in tin; first 
process I iv mi-an< of part ol a long >utitra<‘i<>!'. Subtractwis mav be of 
a great length. 

-. Tin- following aiv .o.mc v»t tin* more important charaet. -risth-s of ciphers of 
t hi.-- type : - - * 

p) " Mi. vnl unit " code hook' are sometimes emplowd, i.r. mi.ved if and 4-ligurr, 
pr mixed -} and" f>-figinv. In the preparation of such book' there must, 
of course, he no ambiguity for the decipherer as to the division into units 
of the cipher text of the first process, (in this connection reference should 
he made to the substitution employed in exercise (■> of Section I.) In one- 
historical instance a mixed '2, d ami 4-ligure book is known to have been 
used under a long subtract or, 

(ii) Systematic code books are sometimes employed where the arrangement is 
not strictly alphabetic but is sufficiently systematic to permit encipher- 
ment and decipherment front the same book. 

(iii) Dictionaries are sometimes employed as code books; in these the cipher 

groups are normally made up of the page and position <>n the page of 
the word ret|uiring encipherment. 

(iv) Sometimes a numlx-r of separate subtractors are employed. If so, the 

particular subtracter chosen lias to he indicated for the benefit of the 
decipherer in some prearranged manner. 

(v) When one long subtractor is employed and there are a number of different 

possible starting points, the particular starting point used has to be 
indicated. 

(vi) In the case where there is only one starting point for all telegrams, indication 

is obviously unnecessary. 

(vii) Indicators may In; in the preamble of the telegram, nr at the beginning or 
end of the text, or hidden in the body of it. 

(viii) There may he many alternative indicators for each starting [xtint, or they 
may vary according to the date, tfie serial number, or even the length 
of the telegram, or according to certain figures of the enciphered text, 
(ix) Sometimes th<- starting jxiint depends directly on the date, the serial 
number, or the. length of the message. In such cases there are frequently 
nun-textual groups in the text which check the starting point. 

d. J lie basis of any method of solution of long subtracter ciphers must always 
be the accumulation of “ depth.” The following are the vulnerable points in the 
construction of this type of cipher which most frequently assist the cryptographer — 

(i) Obvious or insufficiently concealed starting point indicators. 

(ii) Limitations in the basic book. 

(iii) I. imitations in the subtractor. 

(iv) Groups which are an integral part of the subtractor inserted unchanged in 

the text for check purposes. 

(v) Overloading of the substractor. 

These vulnerable characteristics will now bo treated in more detail. 

4. Types of indicators are too numerous for classification, but it may be stated 
generally that attempts, however ingenious, to conceal indicators systematically 
are rarely successful against experienced cryptographers. For this reason, where 
concealed indicators have not been found but are suspected, a systematic scrutiny 
of the tabulated beginnings and ends of telegrams, however laborious, lias frequently 
to be undertaken. 
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5. limitation will hi* best understood from a feu hi-t cnol i : 

i \ jA.ooo group 5-figure book in wliicli 1 1 1 > • cipii’i gioup- .ill lie biiw.-in 
moon and 249f>9. 

n) A 4-ligtuv Ijook in which the cipher group- nm-i-t 1 > v» n •>] 4 odd ngun 
oiilv 1250 of 1 lie 10,090 possible 4- figure group- :i|. u — d. 

(in' A 5- fig it tv book in which the non-carrying sum >>i lie- digit- of each gr*»Mj 
i- 0 ; group- such as 23799, d4b25 and 15390 oei nr. but 29407 does me 
onlv in, ikio possible groups are used. Tin- ivpe j- known a- " value 
limitation. Its only advantage is that any group in which one Injure 
lias been wrongly transmitted is immediately recognisable. 

(iv) A 4-figure book in which the carrying sum of the four digits o) e.,< h group 
i* a multiple of d. 

i 1 A dd.ooo group 5-figure hatted hook in which the first pair oi e;n h group 
is limited to one of the following:- 90, Id. 15. 17, '21, 2d. 25. 27. dl. 
d5, d7, 41. 4d, 45, 47. 51, 53. 57. til, (>d, t>5. (57. 71. 7d, 75, SI, Sd, S5. 
S7. Ml, 9d, 95, 97. 

(vi) A 4,000 group 4-figure book in which till groups start with 0, d, (> oj- p. 

Exercise 2.— Hxamine the effect of applying sbhtractors to each of the above 
limited books : — 

(i) In which of the examples given could the limitation be used to set over- 

lapping messages in their true relationship to one another, i.e., to get 
depth ; 

(ii) Mow would you proceed to get sufficient depth to recognise the form of 

the limitation in the first instance (assuming that von get no help from 
the indicating system) ? 

(iii) Mow would yon use the limitation to get as much depth as possible at all 
prints of the subtractor ? 

6., Limitations of the subtractor are not commonly found, but the following, 
which have been seen in actual use. may serve as a general guide — 

(i) The figure 0 is omitted, presumably on the tpiite mistaken assumption that 

the security of a subtracter cipher depends to some extent on the fact 
that no figure obtained in the first process remains unaltered in the 
second. 

(ii) ’I he subtracter is formed by each holder of the cipher independently bv 

expulsion front a short series of figures or a kev according to a prearranged 
-yst' in As an example of this a subtractor might he formed from an 
arbmaiA 5 figure group as follows : — 

I .d>> .my arbitrary 5-figure group ; this will be th<- first group oj 
tin -uiur.ictor : the 5 figures of the second group will coit-i-t of the 

sum oi Ue I't and 2nd figures, the sum of the 2nd and dni, the -uni ot 
tlie did and 4th, the sum of the 4th and 5th. and 1 1 >< - .-urn of lie- 5th 
and l-t figures of the first group. Thus the subtracter derived from lie 
arbitrary group 23791 would be 23791 5i K4 id 5(^>dS 12913 3I"44 
41497 55251 <<77HO, etc. Tin- particular arbitrary gomp on whah 
the subtract or is based would, ot course, have io |>e mduated h\ t i i< 
encipherer. 

■nil 1 he subtractor L- taken tnuu a limited • »r regular -om i e. e c u igouotu-*ti teal 
or logarithmic tables. 



30 



0EF ID : A3 07 983 



(iv) The subtractor is an actual mathematical series, such as the successive 

powers of the figure 2, which would give 24816 32641 28256 51210 
24204, etc. 

(v) The subtractor is formed from successive groups of the encipher of the basic 

code book employed in the first process, where that book is hatted. 

Exercise 3. — What limitation, partial or complete, would you expect to find in 
the groups of the final enciphered form of messages where the basic book has the 
limitation of para. 5 (v) above and the subtractor consists of groups from the 
encipher ? 

(vi) The subtractor is formed by substitution of either 1 or 2 figures for each letter 
of a prearranged narrative text. In this type the base would be a code or 
dictionary and the subtractor derived from a book, such as a novel, of 
which all the holders of the cipher possess a copy. Each holder must also 
be in possession of the substitution table to be used for converting the 
text into figures and he must know: how to indicate his starting point in 
the novel. 

Exercise 4. — Suppose that you are required to solve cipher messages inconsiderable 
quantities knowing that a 300-page (approx.) English Dictionary is used as the basic 
code and that the solution is derived from an unknown novel by use of the following 
substitution table : — 

A 25 B23 C97 D01 E41 F05 G64 H95 119 J63 K45 LOO M65 N78 023 P80 
Q83 R37 S86 T78 U89 V50 W78 X79 Y47 Z54 

In the first process each word or letter may be assumed to be represented by a 
5-figure group of which the first 3 figures are the page of the dictionary on which 
the word occurs and the last 2 figures are the position on the page, e.g., the group 
03219 means the 19th word on page 32, and 25701 means the first word on page 257. 
It may further be assumed that the starting point indicating system is known and 
expresses directly the page, and the line on the page, of the starting point of the 
subtractor for each message, also that there are several cases of 4 or 5 messages 
reciphercd from the same starting point. On what lines would you suggest 
approaching the solution of messages in such a cipher ? 

Exercise 5— What would be the effect of substituting single figures for letters in 
the construction of the subtractor instead of pairs in the above cipher according to 



the following table ? 


A, K, U represented by 0 ' 




B, L. V 


r> 


„ 1 




C, M, W 


ft 


„ 2 


* 


D; N, X 


fi 


.. 3 




E, 0, Y 


M 


„ 4 




F, P. Z 


t* 


5 




G, Q 


ft 


,.6 




H, R 


t » 


7 




It s 




„ 8 




J. T 


ft 


9. 



7. One peculiar type of long subtractor has been seen on rare occasions ; in this 
type there is an extra arbitrary 5-figure group after the last group of each line of the 
subtractor as printed, or of each alternate line. Such groups are inserted unchanged 
in the message when recipherment has reached the end of the line where they lie. 
They are presumably intended as a position. check for the benefit of the decipherer, 
but they are of course completely destructive of security, as they can be used to set 
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all overlapping messages in their proper interrelationship. When they are used, 
they are quite easily recognisable as recurring groups, which appear at regular 
intervals in two or more long messages. 

S. A subtractor mav be said to be overloaded when it is so short or used for so 
many messages that it is practicable to set messages at some places in sufficient 
depth for solution, merely by inessage-to-message recurrences. It is difficult to 
make any definite statement as to the amount of depth required for the solution of 
long subtractors, but it has frequently been found possible to solve on a depth of as 
little as 5 where a sufficient number of identifications have been established to read 
some messages. 

9. So far little has been said about tbs actual process of breaking into an unknown 
long subtracter cipher. Investigation on the following lines in order to get depth 
is a necessary preliminary : — 

(i) All messages must be " registered/' tf.g., the beginnings and ends tabulated 

together with all relevant external information, such as date and time of 
origin, identity of originator and addressee, call signs of transmitting and 
receiving wireless stations, external indicators, if any, etc. 

(ii) The register formed above must be scrutinised for initial or final recurrences 

between messages and for evidence of concealed starting point indicators. 

(iii) It may now be possible to lay out the whole material in depth. If not, that 

portion of the material which can be arranged in depth should be tabulated 
and the columns so obtained examined for limitations of the basic book. 
Such limitations, if found, should make it possible to complete the 
tabulation in depth. 

(iv) If the above procedure is unsuccessful or only partially successful, it may be 

necessary to analyse the whole material or a large portion of the material 
for message-to-message recurrences. Here students should remember 
that recurrences are not to be expected within the same message, and that, 
as large numbers of groups will have to undergo analysis, recurrences of 
single groups will very' frequently be accidental, while recurrences of two 
or more consecutive groups are very unlikely to be accidental. 



10. Below will be found a portion of the tabulated depth in a 5-figure long 
subtractor cipher. The- best depth is here 15, and a section 7 groups wide is given. 
The demonstration following shows some of the information which can be obtained 
from this small amount of material. It will, no doubt, be realised that the example 



is a very favourable one. 

A 


B 


C 


D 


E 


F 


G 


1 


(31892 


64437 


12991 


82384 


45306 


87882 


91445-. 


*> 


(54906 


22775 


85570 


16687 


87419 


08502.. 


3 

4 


67072 


80559 


(12244 

33541 


95354 

73774 


19873 

31360 


58790 

46739 


06328.. 

78358. . 


5 


45492 


57229 


26844 


85622 


53700 


89693 


06791.. 


0 


34810 


80186 


40608 


87917 


12449 


72536 


14722.. 


7 


69256 


54358 


34948 


13287 


32231 


89664 


01580. . 


8 


23791 


41612 


49942 


07239 


37344 


87419 


0485S. . 


' i) : 


47200 


46805 


1 1247 


07527 


24255 


41314 


91445. . 


10 . 


46921 


44081 


33541 


11003 


475S0 


87882 


91445. . 


n 


24367 


76140 


02646 


14862 


02331 


41314 


91445.. 


12 


53665 


80186 


42669 


11003 


47700 


87419 


70333. . 


13 


44882 


60353 


21048 


70323 


12780 


54257 


64484. . 


14 


75050 


98409 


07744 


20002 


18551 


45738 


06328.. 


. 15 


65502 


58906 


33541 


07682 


47580 


43823 


92842.. 



All ]x?sitional recurrences of one or more complete groups are shown in heavy 
type. The passages numbered 1, 2 and 3 are beginnings of messages, the remainder 
are sections from the middle of messages. 
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M. Examination for limitations reveals that the first figures of groups are 
limited as follows : — 



Column A 
B 



•V’ 



c 

D 

E 

F 

G 



2, 3, 4, 5, 6, 7. 

4, 5, 6, 7. 8, 9. 

0, 1, 2, 3, 4. 

7, 8, 9, 0, 1. 2. 

0, 1, 2, 3, 4, 5. 

4, 5, 7, 8. 

6, 7, 9, 0, I. 



This can only mean that, there is a limitation of the first figure of all groups in 
the basic book which may be assumed to begin with 0 r 1, 2, 3, 4, or 5. This 



provides a provisional skeleton subtractor as. follows : — 

9 

2.... 4.... 0.... 7\:.T : . or:.. 4. 



6 . 



.12. The majority of the groups which occur more than once in a column may be 
presumed to represent very commonly used groups in the basic book. Certain groups 
may in fact occur more than once in two or more columns. To test this, each group 
which occurs more than once in a column is subtracted from all the other groups 
in the same column. Analysis of the result reveals certain recurrent groups which 
are underlined in the tabic below : — 



Group 

subtracted. 


B 

80186 


C 

33541 


11003 


F 

87882 


F 

87419 


F 

41314 


G 

91445 


G 

06328 


1 


84351 


89450 


71381 


00000 


00473 


46578 




95127 


2 


74820 


99234 


74577 


00637 


00000 


46105 


17167 


02284 


3 




89703 


84351 


71918 


71381 


17486 


15983 


ooooo 


4 


00473 


00000 


63771 


89957 


69320 


05425 


87913 


72030 


5 


77143 


93303 


74629 


02811 


02284 


48389 


15356 


00473 


6 


00000 


17167 


76914 


95754 


95127 


31222 


23387 


18404 


7 


73272 


01407 


02284 


02882 


02255 


48350 


10145 


05267“ 


8 


61536 


16401 


96236 


00637 


ooooo 


46105 


13413 


08630 


. 9 


66729 


88706 


96524 


64532 


64905 


ooooo 


ooooo 


95127 


10 


64905 


00000. 


00000 


00000 


00473 


46578 


ooooo 


95127 


It 


96064 


79105 


03869 


64532 


64905 


ooooo 


ooooo 


95127 


12 


00000 


19128. 


00000 


00637 


ooooo 


46105 


89998 


74015 


13 


80277 


98507 


69320 


77475 


77848 


. 13943 


73049 


68166 


14 


18323 


74203 


19009 


68956 


68329 


04424 


15983 


ooooo 


15 


78820 


00000 


96689 

■ . 


66041 


66414 

• 


02519 


01407 


96524 



1 



C"' 




33 



F ID : A3079835 



It will be seen at once that column B with the subtractor 80186, column D with 
the subtractor 11003. column F with the subtractor 87419 and column G with the 
subtractor 06328 are interlinked. These subtracters are used as provisional 
subtractors in the following table, but the first figure has in each case been corrected 
to agree with the skeleton subtracter at the end of para. 1 1 above. 



Provisional 
Subtracter : — 


A 

2.... 


B 

40186 


C 

9 

o.... 


D 

71003 


E 

0.... 


F 

47419 


G 

66328 


1 


(31892 


64437 


12991 

2 

1 

22775 

3 

2 

(12244 

•> 


82384 


45306 


87882 


91445.... 


2 


/ 


2433J 

(54906 


11381 

,85570 


4 

16687 


40473 

87419 


35127 

08502.... 


3 




14820 


14377 

95354 


1 

19873 


40000 

57790 


42284 
06328. . . . 


4.... 


67072 


80559 


1 

3354 1 
/ 

3 

2684 1 
•» 


21351 

73774 


/ 

31360 


11381 

46739 


40000 
78358 


5 


4 

45492 


40473 

•57229 


02771 

85622 


3 

53700 


09320 

89693 


12030 

06791.... 


' 

6.... 


2 

34810 


17143 

80186 


0 

2 

40608 


14029 

87917 


5 

12449 


422S4 

72536 


40473 

14722.... 


7.... 


/ 

69256 


40000 

54358 


4 

34948 

i 


. 16914 
13287 


/ 

32231 


35127 

89664 


58404 

01580.... 


8.... 


4 

■ 23791 


14272 

41612 


3 

49942 


. 42284 
07239 


3 

37344 


42255 

87419 


45262 

04858.... 


9.... 


0 

47200 


01336 

46805 


4 

31247 

o 


36236 

07527 


3 

24255 


40000 

41314 


48530 - 

91445. . . . 


10.... 


2 

46921 


06729 

44081 


1 

33541 

A 


36524 

11003 


2 

47580 


04905 

87882 


35127 

91445.... 


11. ... 


• 2 

24367 


04905 

76140 


t 

3 

02646 

1 


40000 

14862 


4 

02331 


40473 

41314 


35127 

91445.... 


12.... 


0 

53665 


36064 

80186 


0 

42669 


43869 

11003 


0 

47700 


04905 

87419 


35137 

70333.... 


13.... 


3 

44882 


40000 

60353 


4 

21048 

•t 


40000 

70323 


4 

12780 


40000 

54257 


14015 

64484.... 


14... 


2 

75050 


20277 

98409 


2 

07744 


09320 

20002 


1 

18551 


17848 

45738 


08166 
06328. ... 


15.... 


& 

65502 


58323 

58906 


0 

33541 

j 


59009 

07682 


47580 


08329 

43823 


40000 

92842.... 




4 


18820 


3 


36689 


4 


06414 


36524 
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Exercise 6. -Examine the three message beginnings a> provisionally deciphered 
in the above table and complete the provisional subtracter. Examine the result 
for “ offset " reeurre.nces (see para. 3 on the first page of this section) to satisfy 
yonrsell that the result \-<m have achieved is correct. 

Id. An alternative method, more general in application, could have been used 
to obtain a provisional subtractor. An index could have been prepared of the 
difference between every pair of groups occurring in the same column. In practice 
the smaller of the two possible complementary differences between anv two groups 
is given in such an index. 

The following tabic exhibits graphically the differences between each pair of 
groups in column A : — 



TABLE OF DIFFERENCES FOR COLUMN A 


|67(I72 

1 


] ] 

45492 1 348 1 ( ) 69256! 2379 1 

' i 


47200 


46921 


24:167 


5: 1665 4 4882 75070 65502 



A 1 89236281 > 1 46< X) ( K1028 38464 



67072: 

454921 

34810 

69265 

23791 

4721 X>! 

46921 

24367 

53665 

44882 

75050 



44381 



22680,3326202284 

! 11682 24864/22701 
l 35446ilH29i 



20872 



21 151 ,437 15! 144 17j2:V290 1S08S ! 02530 
1 82731) 1 6 1 0 ;K 1668*20 1 1 ( I 



1 128 18'01539i2 1135 



t 



>4656522056 

*24519 



1:1490(121 1 1 10553,29855! 10072 4 1240 3 1792 
23335 45999! 16691 f 25474|16804j04754 
2323001676 30974121 19! 523694281 1 
;0 1 389,2:1943 1 6165!< 13428 :188.51 V 28:102 



22664,17744 02 



39 29681 

i39:« I8;2( 1525*5 1 793 4 1 245 



19883 22495! 12947 
3 1278/2 1720 
10558 



Exercise 7.— Study the above table. Assuming that you have prepared such a 
table for each column, how would you analyse your differences with a view to 
discovering if any pair of columns have three different groups in common ? 

14. Y et another approach could have been to assume that messages 1. 2 and 3 
all start with the same recurrence. The result of subtracting 2 from 1 and 3 from 2 
is shown below. 

K 0 D E F G 

1- 2 10531 90226 07814 39729 (10473 93943 

2- 3 10531 90226 07814 39729 02284 

Exercise 8. — Use the above information to obtain provisional subtracters for 
the seven columns. 



Exercise 9. — You have now reduced the material provided to homogeneity. 
List the groups so obtained and count the number of occurrences of each. Prepare 
a difference table for the commonest groups (not more than 6 or 7 of them). 
.X.B . — It is wise to omit those groups which occur only in the stereotyped 
beginning of messages 1, 2 and 3. 
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l:\ercise 10.- I’- 


•u will be 


fottml ] 


loitioit.' 


of S further m 


•"agi" in tin* 


'ante 


cij iher as ab"v 1 •. 


'.•t iti 


depth ” 


at another nan of th 


* '111 i! 1 .11 t * if 


Find 


provt.'ional 'tibt t »• i 


* - to r<*du 


*e them 


In the 


same 1> 


me a- al 


■>\e. Add il. 


■■ new 


grout" oi.i , 


* :*i**j 


a red iu 


Xefcisi 


9. 










.ssts 


23788 


53i iSS 


S7895 


2 S< x h i 


43S 1 1 . 




1 


04074 


15331 


t5S^K5 1 


71253 


32419 


728 IS . 




l.s 


7ihi22 


vk>2o7 


732S4 


431 15 


4i >440 


S>>775 




10 


7i h 122 


2402S 


44197 


3|0ln 


27133 


S7501 . . 




20 


70242 


23303 


32073 


79072 


(>5259 


S7591 . . 




21 


3448 1 


23303 


32103 


38! 187 


3444t f 


875 p 1 . . 




■>o 


33*185 


I ISIS 1 4 


25013 


3S430 


12975 


5433ft . . 




23 


71307 


25577 


3S33-I 


(4419ft 


32t •-1(4 


4 1517 . . 





Exercise 11. — Message No. 24 of which tin* first 5 cipher groups an* given below 
is .*«f*t against tin* subtractin', mu* figure (not one group — one figure) t « * tin* right of 
me.-mage Nn. I above. l r it i* 1 ;!:■ *ru** figures of .tin* basic bonk ami reduce the list 
of groups prepared in Fxercmi 9 ami Mtn tin* correct ba.n*. Wediire tin* two portions 
of the Mtht ractor solved to the original tigun*'. 



45015 S88S2 592S5 82SS2 54385 
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SUPPLEMENTARY EXERCISES— N-P 

N. — The following series of messages was intercepted by the German Wireless 
Interception Service in Occupied France during September and October, 1940. 
Owing to the very high frequency used by the transmitters it was impossible to locate 
the sets with any certainty by direction-finding ; one set however was fairly certainly 
across the Channel, and the other in the coastal sector near the important aerodrome 
of Bois-le-Duc. The character of the transmission made it fairly evident that the 
messages Pi, 2, 3, etc., were those of a hostile secret agent reporting from this area, 
and the Al, 2, 3, etc., series the replies from his H.Q. 

The Gestapo gradually narrowed the search and finally raided a hotel room in 
the local town ; their bird had flown, but among the burnt papers in the grate they 
were able to identify part of the last message (A. 8.) intercepted ; a miniature wireless 
transmitter was also found, together with two sheets of paper ; one of these was a 
tom sheet of official French notepaper from the local Mairie, with notes on it as 
follows 

' REPUBLIQUE FRANC A1SE 
Liberty Egaliti Fraternity 

Mairie, 

Blanqueville, le 19... 

PAS- DE-CALAIS. 

Poirot Cas d’urgence 

St.-Etienne Nouvelle Elfive 

1 2 
Neu-Offenbach Sous-Officier 

f 

No. Tel. 

Blanqueville 16 
Bapaume 43 
Bois-le-Duc 9 
Givry-sur-Somme 2 
Blanqueville 44 
Courtois 23 

This suspicious document was accompanied by another, a sheet of squared school 
paper, on which was scribbled in English an unfinished message : — 

" FROM P16 STOP YOUR A8 URGENT ACKNOWLEDGED STOP 
ACTION BEING....” 

The agent was probably in the middle of writing this message when the raid took 
place ; no other indication of his method of enciphering was found, except some more 
blank sheets of squared paper, on one of which was scribbled in English : — 

“ Play up, play up, and play the game ”. 

" Ach,” commented the Chief of the German cipher bureau on seeing this, 
" Der Englander, auch wenn er Spion wird, muss immer ‘ gentleman ’ bleiben, er 
muss ‘ play fair ’ ! ” 



Origine Alphonse 

Endemiquc Elaine 

Pas-de-Calais 1 

Democrat Octave 



Paul * 

Edouard 

Xerxes 

Nigel 

Quichottc 

Zadig 



0. — The background to this exercise is the early part of the British offensive in 
Libya in January, 1941, culminating in the fall of Bardia. The messages are 
supposed to be Italian, taken by our I nterception Service, The contents are imaginary, 
but more or less realistic, and the text is English. 

You may expect the Italian commanders concerned to use signatures and 
addresses as a regular practice. The following extracts from the Italian Order of 
Battle published by the Intelligence Branch of the General Staff may be of 
assistance : — 

ANT0NELL1 General Intendant-General (Supplies) Located at BENGHAZI. 



ARGENTINO General Commanding Defences ,, ,, DERNA. 

BERGINZOLI General „ „ „ BARDIA. 

GALLINA General C.-in-C., Eastern Libya, at „ „ TOBRUK. 

advanced G.H.Q. 

LEO Lt .-Col. O.C., Saharan Battalion ,, ,, HON. 

KUFFO Col. Second in Command ,, ,, DERNA. 



The Wireless Intelligence Service has provided the following identifications of the 
Italian W/T stations concerned 

WjT Station. Identification. 

X Advance H.Q., E. 'Libya, near TOBRUK. 

Y BENGHAZI area (Probable). ' •' 

Q DERNA (Probable). 

S H.Q., BARDIA. 

N TOBRUK (Probable). 

O Believed to be a form of C.Q. (all stations) call, since traffic is always 
to 0, and never originates there. 

P HON. 

This exercise is best tackled by a syndicate. Write a description of the different 
processes used and of the indicating systems, and build up the original book or books 
as far as possible. Describe also the reasoning you used in arriving at a solution. 

P. — The recipher and concealed indicator systems used in this problem arc typical 
of a fairly high-grade cipher. The original cipher is not as elaborate as the dictionary 
code-book used in the last problem, and the texts are quotations from a modern 
novel. Write a full description of the cipher and of your attack on the problem. 



(C 41687— l) 250 8/41 
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